This is a working document describing options for doing secure user separation in pilot jobs on the Open Science Grid, in cases where the users submitting jobs do not each have their own X.509 certificate.